MASTODON 4.5.8 BRINGS SECURITY FIXES AND NEW FEATURES TO TOMB RAIDER SOCIAL

[ 24 March 2026 ]

Tomb Raider Social has been updated to Mastodon 4.5.8, addressing several important security concerns and dependency updates. Notably, the release rectifies insufficient checks on quote authorisations and resolves an open redirect issue in the legacy path handler. In addition, a new feature has been introduced allowing users to search for already-known private Get to Social (GtS) posts, enhancing content accessibility and management.

This release also includes changes and numerous bug fixes aimed at improving usability and reliability. Media description limits for remote attachments have been increased from 1,500 to 10,000 characters, HTTP signatures now bypass the Accept header, and numeric ActivityPub endpoints redirect to short account URLs when HTML is requested.

Other fixes address issues such as overly strict username validation during account migration, re-triggered poll expiration notifications, incorrect translation strings in web authentication mailers, disabled Unblock and Unmute actions, and hover card display inconsistencies. Additionally, improvements have been made to account for race conditions, duplicate entries, and list management, ensuring that unfollowed members' posts are correctly removed from lists.

Built on the Mastodon platform, Tomb Raider Social offers a dedicated space for fans of the Tomb Raider series to connect, share content, and engage in creative discussion. Unlike traditional social media, it operates on a decentralised, open-source model, allowing independent servers to set their own rules and manage their communities. The platform emphasises user autonomy, privacy, and community moderation, providing a chronological, ad-free experience without algorithmic interference.

Tomb Raider Social